Netskope Security Advisory – Netskope Client Security Advisory
Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with admin privileges can lead to bypassing the NSClient Tamper Protections due to weak Discretionary Access Control List (DACLs) on the service object and related registry keys, and lack of kernel-enforced self-protection in Netskope Client.
Security Advisory ID: NSKPSA-2025-008
Version: 1.0
Status: Published
First Published: June 16, 2026
Description
Netskope is notified about a potential gap in its Netskoped Client for Windows systems where a malicious insider with admin privileges can lead to bypassing the NSClient Tamper Protections due to weak Discretionary Access Control List (DACLs) on the service object and related registry keys, and lack of kernel-enforced self-protection in Netskope Client.
Affected Product(s) and Version(s)
Product Name: Netskope Client
Affected Platform: Windows
Affected Version: All version below R138
CVE-ID(s)
CVE-2025-15642
Remediation
Netskope has released a security patch for the issue. Please see below
Instrucciones de descarga de Netskope – Descargar Netskope Client and Scripts – Netskope Support
Workaround
There are no workarounds available at this time.
General Security Best Practices
Netskope recommends using security hardening options available in the product and configuring them to harden the security of a Netskope tenant- https://docs.netskope.com/en/secure-tenant-configuration-and-hardening/
Explotación y divulgaciones públicas
Netskope no tiene conocimiento de ninguna explotación activa del problema de seguridad.
Special Notes and Acknowledgement
Netskope credits Juan Pablo Barriga for reporting this flaw.
Revision History
| Versión | Fecha | Section | Notes |
|---|---|---|---|
| 1.0 | 16 June 2026 | Initial Version |
Aviso legal:
En la máxima medida permitida por la ley aplicable, la información proporcionada en este aviso se proporciona "tal cual" sin ningún tipo de garantía. Tu usar de la información en este aviso o de los materiales aquí enlazados es bajo tu propio riesgo. Este aviso y todos los aspectos de la Política de Respuesta a Incidentes de Seguridad de Productos de Netskope están sujetos a cambios sin previo aviso. La respuesta no está garantizada para ningún problema o clase específica de asuntos. Tus derechos respecto a garantías, soporte y mantenimiento, incluidas vulnerabilidades en cualquier software o servicio de Netskope, están regulados únicamente por el acuerdo maestro aplicable entre Netskope y tú. Las declaraciones de este aviso no modifican, amplían ni modifican de ninguna manera sus derechos bajo el acuerdo marco aplicable, ni crean garantías o compromisos adicionales.
Acerca de Netskope
Netskope (NASDAQ: NTSK), a leader in modern security and networking for the cloud and AI era, addresses the needs of both security and networking teams by providing optimized access and real-time, context-based security for the AI ecosystem inclusive of agents, applications, tools, LLMs, people, devices, and data. Thousands of customers, including more than 30 of the Fortune 100, trust the Netskope One platform, its Zero Trust Engine, and its powerful NewEdge network to reduce risk and gain full visibility and control over cloud, AI, SaaS, web, and private applications – providing security and accelerating performance without trade-offs. Learn more at www.netskope.com, Netskope.ai, on LinkedIn, and Instagram.
